Skip to content

Commit f88239e

Browse files
jmessiassjmessiass
committed
update workflow
1 parent 6be5f63 commit f88239e

3 files changed

Lines changed: 186 additions & 216 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 103 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,103 @@
1+
version: 2
2+
updates:
3+
# Python dependencies
4+
- package-ecosystem: "pip"
5+
directory: "/"
6+
schedule:
7+
interval: "weekly"
8+
day: "monday"
9+
time: "09:00"
10+
open-pull-requests-limit: 10
11+
assignees:
12+
- "jmessiass"
13+
commit-message:
14+
prefix: "chore"
15+
include: "scope"
16+
labels:
17+
- "dependencies"
18+
- "security"
19+
20+
# Python app dependencies
21+
- package-ecosystem: "pip"
22+
directory: "/app"
23+
schedule:
24+
interval: "weekly"
25+
day: "monday"
26+
time: "09:00"
27+
open-pull-requests-limit: 5
28+
assignees:
29+
- "jmessiass"
30+
commit-message:
31+
prefix: "chore"
32+
include: "scope"
33+
labels:
34+
- "dependencies"
35+
- "app"
36+
37+
# Tasks dependencies
38+
- package-ecosystem: "pip"
39+
directory: "/tasks"
40+
schedule:
41+
interval: "weekly"
42+
day: "monday"
43+
time: "09:00"
44+
open-pull-requests-limit: 5
45+
assignees:
46+
- "jmessiass"
47+
commit-message:
48+
prefix: "chore"
49+
include: "scope"
50+
labels:
51+
- "dependencies"
52+
- "tasks"
53+
54+
# Tests dependencies
55+
- package-ecosystem: "pip"
56+
directory: "/tests"
57+
schedule:
58+
interval: "weekly"
59+
day: "monday"
60+
time: "09:00"
61+
open-pull-requests-limit: 5
62+
assignees:
63+
- "jmessiass"
64+
commit-message:
65+
prefix: "chore"
66+
include: "scope"
67+
labels:
68+
- "dependencies"
69+
- "tests"
70+
71+
# Docker dependencies
72+
- package-ecosystem: "docker"
73+
directory: "/"
74+
schedule:
75+
interval: "weekly"
76+
day: "tuesday"
77+
time: "09:00"
78+
open-pull-requests-limit: 5
79+
assignees:
80+
- "jmessiass"
81+
commit-message:
82+
prefix: "chore"
83+
include: "scope"
84+
labels:
85+
- "dependencies"
86+
- "docker"
87+
88+
# GitHub Actions dependencies
89+
- package-ecosystem: "github-actions"
90+
directory: "/"
91+
schedule:
92+
interval: "weekly"
93+
day: "wednesday"
94+
time: "09:00"
95+
open-pull-requests-limit: 5
96+
assignees:
97+
- "jmessiass"
98+
commit-message:
99+
prefix: "chore"
100+
include: "scope"
101+
labels:
102+
- "dependencies"
103+
- "github-actions"

‎.github/workflows/codeql.yml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
name: "CodeQL Analysis"
2+
3+
on:
4+
push:
5+
branches: [ "main", "dev" ]
6+
pull_request:
7+
branches: [ "main" ]
8+
schedule:
9+
- cron: '30 3 * * 1' # Monday at 3:30 AM
10+
11+
jobs:
12+
analyze:
13+
name: Analyze
14+
runs-on: ubuntu-latest
15+
permissions:
16+
actions: read
17+
contents: read
18+
security-events: write
19+
20+
strategy:
21+
fail-fast: false
22+
matrix:
23+
language: [ 'python', 'javascript' ]
24+
25+
steps:
26+
- name: Checkout repository
27+
uses: actions/checkout@v4
28+
29+
- name: Initialize CodeQL
30+
uses: github/codeql-action/init@v3
31+
with:
32+
languages: ${{ matrix.language }}
33+
queries: security-and-quality
34+
35+
- name: Autobuild
36+
uses: github/codeql-action/autobuild@v3
37+
38+
- name: Perform CodeQL Analysis
39+
uses: github/codeql-action/analyze@v3
40+
with:
41+
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)